
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier: y6PeB/LDwz9yyVIVnd942WEjdEvNrfNC2TjduzosSqA=
Subject key identifier: 4F:77:7C:3F:7F:DD:A8:17:8F:DE:86:E4:E8:24:A1:20:40:DB:6E:C9
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial: 08A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number: 089B
Signing time: Fri 12 Jun 2026 20:36:13 +0000
Manifest this update: Fri 12 Jun 2026 20:36:12 +0000
Manifest next update: Fri 19 Jun 2026 20:36:12 +0000
Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: LrIPiYgZ1pZTMRcV5sFtdTFvygUsKl94naPc0+p1B84=)
2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Validity
Not Before: Jun 12 20:36:12 2026 GMT
Not After : Jun 19 20:36:12 2026 GMT
Subject: CN=6a2c6dbc-c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:a7:72:c4:86:a0:93:94:f5:14:70:d6:d4:
ab:48:d5:64:2e:27:8b:ce:4a:52:80:a8:99:0f:5a:
ac:8d:54:16:73:49:d0:23:9d:66:c6:ae:8d:ef:d9:
db:33:ca:f0:76:41:26:e6:44:d6:e6:cb:d4:2a:3f:
e0:18:d5:8e:2b:d4:8a:d8:08:dd:08:a9:80:a0:e8:
18:87:cb:a8:16:e2:29:f8:a5:b7:86:22:42:57:cf:
b0:c9:5f:47:43:09:7f:db:d5:5d:0d:36:8f:dd:ce:
27:67:02:f1:1b:3e:94:cb:ab:68:8d:0c:82:17:bb:
60:7d:70:88:fe:3d:43:52:06:6f:5c:40:6d:b1:a9:
16:2a:6e:ca:a7:ed:d5:4c:0c:45:67:86:d0:73:24:
5c:fd:96:e3:57:fd:b8:e3:aa:43:f5:ec:56:87:d5:
8b:49:45:e4:43:13:a2:c9:53:e1:92:65:bd:ec:96:
5f:9f:39:ed:a4:c1:dd:07:06:6e:cb:6e:09:2e:01:
7b:ff:5d:9c:e8:13:50:43:fe:e7:a0:af:da:42:8d:
ac:05:67:ef:1c:03:b5:8c:ce:0b:a8:12:0e:8d:74:
a4:3b:67:a0:0e:9a:0d:f3:90:62:c6:e8:16:82:80:
35:b4:ec:58:72:df:50:99:c7:82:8f:30:95:f0:37:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:7C:3F:7F:DD:A8:17:8F:DE:86:E4:E8:24:A1:20:40:DB:6E:C9
X509v3 Authority Key Identifier:
keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7f:0b:8f:2d:8c:a2:74:2a:5c:2b:61:59:9c:5c:a6:5c:08:
71:09:a3:3d:70:17:89:03:99:59:d4:9e:7e:94:3d:92:d3:9c:
77:26:dd:ad:ef:85:f6:6a:19:67:31:dc:67:f4:f2:53:fd:01:
60:c6:20:da:32:2a:88:59:77:3f:00:1e:d4:cb:85:15:4c:0b:
ca:cb:8f:3f:c0:84:28:f8:01:cc:b4:05:fc:6e:e9:4d:da:98:
01:5a:d1:94:3c:21:27:ae:72:d0:b2:12:76:8b:1a:e5:47:62:
19:5f:44:55:30:d2:bf:6b:29:60:44:2a:ab:e9:74:3d:fe:6a:
2a:72:79:ee:4e:ab:fd:98:41:0e:cc:30:05:4d:9a:cb:87:66:
a9:16:e8:1d:0c:32:ce:4c:83:77:b4:20:9f:40:ed:4d:0e:99:
da:e8:34:6b:3b:c6:47:e5:51:61:59:6b:69:35:3c:9c:d1:4b:
ab:44:de:a2:a1:ba:dc:9a:98:2f:39:d8:08:fe:2b:c5:2d:43:
99:f5:8a:48:82:0b:d7:30:a1:8d:75:55:ee:4c:93:45:e2:04:
f2:d3:05:1e:b0:96:94:f9:cc:65:52:14:a2:22:19:b7:ea:8a:
b4:e7:92:77:6f:de:23:24:bd:eb:cd:c0:91:29:4d:87:b7:b9:
88:9e:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:37 2026 by rpki-client